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DETAILED ACTION 

1 . Pursuant to USC 131 , claims 1-4 are presented for examination. 

2. Claims 1-4 are pending. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form 
the basis for the rejections under this section made in this Office actjon: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
states. 

Claims 1-4 are rejected under 35 U.S.C. 102(b) as being disclosed by Tsunoo et 
aL (European Patent Application Publication 0932272 A2). 

Regarding claim 1 . Tsunoo et al. , discloses a cipher strength estimating device 
for estimating a strength of a ciphertext which is a transformed text obtained at a 
final round of a transformation process including: receiving a plaintext; 
transforming the plaintext using, as a parameter, a session key calculated from a 
key for use in encryption; and repeatedly further transforming the resulting 
transformed text which is the plaintext thus transfomned to perform stepwise 
encryption, the cipher strength estimating device comprising an untransformed 
text calculating unit and a control unit, the untransformed text calculating unit 
comprising a session key prospect calculating section and an untransformed text 
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calculating unit body, wherein: the untransformed text calculating unit is operative 
to receive, as inputs thereto, the plaintext and one of the ciphertext obtained at 
the final round of the transformation process and a putative transformed text 
presumed to be a transformed text obtained at a certain intermediate round; the 
session key prospect calculating section is operative to: calculate one session 
key prospect presumed to be equivalent to the session key to be used at a 
relevant round of transformation by using the plaintext and one of the ciphertext 
and the putative transformed text or output uncalculability identifier data 
indicative of inability to calculate when the calculation is impossible; and 
optionally calculate another session key prospect for the relevant round which is 
different from the session key prospect already outputted in response to receipt 
of recalculation request data requesting recalculation; the untransformed text 
calculating unit body is operative to: calculate a putative untransformed text 
presumed to be equivalent to an untransformed text which is not transformed yet 
at the relevant round based on the session key prospect and one of the 
ciphertext and the putative transformed text; and output the putative 
untransformed text as an output of the untransformed text calculating unit; and 
the control unit is operative to: input the plaintext and one of the ciphertext 
obtained at the final round of the transformation process and the putative 
transformed text obtained at the certain intermediate round, which make a pair, 
to the untransformed text calculating unit; receive the putative untransformed text 
outputted; and repeatedly further input the putative untransformed text as a 
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putative transformed text for a round immediately preceding the relevant round to 
the untransformed text calculating unit together with the plaintext; and optionally 
output the recalculation request data to the session key prospect calculating 
section in response to receipt of the uncalculability identifier data outputted from 
the session key prospect calculating section to cause the session key prospect 
calculating section to again calculate said another session key prospect for the 
immediately preceding round and then output the putative untransformed text 
based on said another session key prospect (0017-0021 , 0037-0043 and 0079- 
0119). 

Regarding claim 2 , Tsunoo et al. . discloses a cipher strength estimating device 
for estimating a strength of a ciphertext which is a transformed text obtained at a 
final round of a transformation process including: receiving a plaintext; 
transforming the plaintext using, as a parameter, a session key calculated from a 
key for use in encryption; and repeatedly further transforming the resulting 
transformed text which is the plaintext thus transformed to perform stepwise 
encryption, the cipher strength estimating device comprising an untransformed 
text calculating unit and a control unit, the untransformed text calculating unit 
comprising a session key prospect calculating section and an untransformed text 
calculating unit body, wherein: the untransformed text calculating unit is operative 
to receive, as inputs thereto, the plaintext and one of the ciphertext obtained at 
the final round of the transformation process and a putative transfomned text 
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presumed to be a transformed text obtained at a certain intermediate round; the 
session key prospect calculating section is operative to: dynamically create a 
condition for use in calculating one session key prospect presumed to be 
equivalent to the session key to be used at a relevant round of transformation by 
using the plaintext and one of the ciphertext and the putative transformed text; 
calculate the session key prospect based on the condition thus created or output 
uncalculability identifier data indicative of inability to calculate when the 
calculation is impossible; and optionally calculate another session key prospect 
for the relevant round which is different from the session key prospect already 
outputted in response to receipt of recalculation request data requesting 
recalculation; the untransformed text calculating unit body is operative to: 
calculate a putative untransformed text presumed to be equivalent to an 
untransformed text which is not transformed yet at the relevant round based on 
the session key prospect and one of the ciphertext and the putative transformed 
text; and output the putative untransformed text as an output of the 
untransformed text calculating unit; and the control unit is operative to: input the 
plaintext and one of the ciphertext obtained at the final round of the 
transfomnation process and the putative transformed text obtained at the certain 
intermediate round, which make a pair, to the untransformed text calculating unit; 
receive the putative untransfomied text outputted; repeatedly further input the 
putative untransformed text as a putative transformed text for a round 
immediately preceding the relevant round to the untransformed text calculating 
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unit togetlier with the plaintext; and optionally output the recalculation request 
data to the session key prospect calculating section in response to receipt of the 
uncalculability identifier data outputted from the session key prospect calculating 
section to cause the session key prospect calculating section to again calculate 
said another session key prospect for the immediately preceding round and then 
output the putative untransformed text based on said another session key 
prospect (0017-0021, 0037-0043 and 0079-0119). 

Regarding claim 3 , Tsunoo et al. . discloses a cipher strength estimating device 
for estimating a strength of a ciphertext which is a transformed text obtained at a 
final round of a transformation process including: receiving a plaintext; 
transforming the plaintext using, as a parameter, a session key calculated from a 
key for use in encryption; and repeatedly further transforming the resulting 
transformed text which is the plaintext thus transformed to perform stepwise 
encryption, the cipher strength estimating device comprising an untransformed 
text calculating unit and a control unit, the untransformed text calculating unit 
comprising a session key prospect calculating section and an untransformed text 
calculating unit body, wherein: the untransformed text calculating unit is operative 
to receive, as inputs thereto, the plaintext and one of the ciphertext obtained at 
the final round of the transformation process and a putative transformed text 
presumed to be a transformed text obtained at a certain intermediate round; the 
session key prospect calculating section is operative to: dynamically create 
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conditions for use in calculating a session key prospect presumed to be 
equivalent to the session key to be used at a relevant round of transformation by 
using the plaintext and one of the ciphertext and the putative transformed text; 
calculate the session key prospect based on the conditions thus created or 
identify inability to calculate when inconsistency is found between certain two of 
the conditions and then output uncalculability identifier data indicative of inability 
to calculate; and optionally calculate another session key prospect for the 
relevant round which is different from the session key prospect already outputted 
in response to receipt of recalculation request data requesting recalculation; the 
untransformed text calculating unit body is operative to calculate a putative 
untransformed text presumed to be equivalent to an untransformed text which is 
not transformed yet at the relevant round based on the session key prospect and 
one of the ciphertext and the putative transformed text; and output the putative 
untransformed text as an output of the untransformed text calculating unit; and 
the control unit is operative to: input the plaintext and one of the ciphertext 
obtained at the final round of the transformation process and the putative 
transformed text obtained at the certain intermediate round, which make a pair, 
to the untransformed text calculating unit; receive the putative untransformed text 
outputted; repeatedly further input the putative untransformed text as a putative 
transformed text for a round immediately preceding the relevant round to the 
untransformed text calculating unit together with the plaintext; and optionally 
output the recalculation request data to the session key prospect calculating 
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section in response to receipt of the uncalculability identifier data outputted from 
the session key prospect calculating section to cause the session key prospect 
calculating section to again calculate said another session key prospect for the 
immediately preceding round and then output the putative untransfonned text 
based on said another session key prospect (0017-0021, 0037-0043 and 0079- 
0119). 

Regarding claim 4 , Tsunoo et aL , discloses a cipher strength estimating device 
for estimating a strength of a ciphertext which is a transformed text obtained at a 
final round of a transformation process including: receiving a plaintext; 
transfomning the plaintext using, as a parameter, a session key calculated from a 
key for use in encryption; and repeatedly further transforming the resulting 
transfomied text which is the plaintext thus transformed to perform stepwise 
encryption, the cipher strength estimating device comprising a first 
untransformed text calculating unit, a second untransformed text calculating unit, 
and a control unit, the first untransformed text calculating unit comprising an 
untransformed text calculating unit body and a first session key prospect 
calculating section, the second untransformed text calculating unit comprising a 
second session key prospect calculating section, wherein: the first untransformed 
text calculating unit is operative to receive, as inputs thereto, the plaintext and 
one of the ciphertext obtained at the final round of the transfomnation process 
and a putative transformed text presumed to be a transformed text obtained at a 
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certain intermediate round; the second untransformed text calculating unit is 
operative to receive, as inputs thereto, the plaintext and one of the ciphertext 
obtained at the final round of the transformation process and a putative 
transformed text presumed to be a transformed text obtained at a certain 
intermediate round; the first session key prospect calculating section is operative 
to: conduct brute-force search for the session key to be used at a certain round 
of transformation by using the plaintext and one of the ciphertext and the putative 
transformed text; calculate one session key prospect presumed to be equivalent 
to the session key to be used at said certain round of transformation or output 
uncalculability identifier data indicative of inability to calculate when the 
calculation is impossible; and optionally calculate another session key prospect 
for said certain round which is different from the session key prospect already 
outputted In response to receipt of recalculation request data requesting 
recalculation; the second session key prospect calculating section is operative to: 
dynamically create plural conditions for use in calculating a session key prospect 
presumed to be equivalent to the session key to be used at a relevant round of 
transformation by higher order differential cryptanalysis using the plaintext and 
one of the ciphertext and the putative transformed text; and calculate one 
session key prospect based on the conditions thus created or identify inability to 
calculate when inconsistency is found between certain two of the conditions and 
then output uncalculability identifier data indicative of inability to calculate; the 
untransformed text calculating unit body is operative to calculate a putative 
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untransformed text presumed to be equivalent to an untransformed text which is 
not transfomried yet at the relevant round based on the session key prospect and 
one of the ciphertext and the putative transformed text; and output the putative 
untransformed text as an output of the untransformed text calculating unit; and 
the control unit is operative to: input the plaintext and one of the ciphertext 
obtained at the final round of the transformation process and the putative 
transformed text obtained at the certain intermediate round, which make a pair, 
to the first untransformed text calculating unit; receive the putative untransformed 
text outputted; input the putative untransformed text as a putative transfomried 
text for a round immediately preceding the relevant round to the second 
untransformed text calculating unit together with the plaintext; and optionally 
output the recalculation request data to the first session key prospect calculating 
section in response to receipt of the uncalculability identifier data outputted from 
the second session key prospect calculating section to cause the first session 
key prospect calculating section to again calculate said another session key 
prospect for the immediately preceding round and then output the putative 
untransformed text based on said another session key prospect (0017-0021, 
0037-0043 and 0079-0119). 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Chinwendu C. Okoronkwo whose telephone number is 
(571) 272 2662. The examiner can normally be reached on MWF 9:30 - 7:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571) 272 4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 



Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 



For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



273-8300. 



Status information for unpublished applications is available through Private PAIR only. 
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